Privacy Policy

1. Data controller

Bitcox is a service operated by its owner, Gian Franco La Rosa (an individual), based in Florida, United States. For any matter related to your personal data, contact us at privacy@bitcox.co.

2. Data we collect

We process the following categories of data:

• Account data: your email address and password (stored encrypted/hashed); and your name if you choose to provide it.
• Push notification token: when you use the mobile app and allow notifications, we collect the device notification identifier (FCM token on Android and APNs token on iOS) and send it to our server so we can deliver signal alerts. It is not your phone number or an advertising identifier.
• Service usage data: the signals you view, your watchlist, the alerts you set, and your interactions with the platform.
• Subscription data: subscriptions are processed through Stripe if you subscribe on the web, or through an in-app purchase on the App Store or Google Play if you subscribe in the mobile app. In neither case do we store your full card details; we keep customer/subscription identifiers and payment status.
• Technical data: IP address, device and browser type, and logs needed for security and operation of the service.

3. How we use your data

• Create and manage your account and authenticate you.
• Send you push notifications for signals and alerts (using the push token).
• Provide and improve the service: show signals, watchlist and analysis.
• Process payments and manage your subscription through Stripe or the app stores.
• Ensure security, prevent fraud and comply with legal obligations.
• We do not sell your personal data.

4. Legal basis (GDPR)

Where the EU General Data Protection Regulation applies, we process your data on the following bases:

• Performance of a contract: to provide the service and manage your subscription.
• Your consent: for push notifications, which you can withdraw at any time by disabling them.
• Legitimate interest: for security and service improvement.
• Legal obligation: for billing and applicable requirements.

5. Who we share your data with

We share only what is necessary with providers acting as data processors:

• Google Firebase (Cloud Messaging / FCM) — push notification delivery on Android and iOS. policies.google.com/privacy
• Apple (APNs) — push notification delivery on iOS. www.apple.com/legal/privacy/
• Stripe — payment processing for subscriptions purchased on the website. stripe.com/privacy
• RevenueCat — management of subscriptions purchased inside the mobile apps. It receives a user identifier and your subscription status so we know which features to unlock; it does not receive your payment method. www.revenuecat.com/privacy
• Apple App Store and Google Play — billing for in-app purchases in the mobile apps. When you buy through that channel the store processes the payment: we never see or store your card details, we only receive confirmation that the subscription is active. www.apple.com/legal/privacy/
• DigitalOcean — server hosting and infrastructure. www.digitalocean.com/legal/privacy-policy
• Meta Platforms (advertising measurement, only with consent) — if you accept the consent notice, we use their pixel to measure the performance of our ad campaigns; if you decline, it does not activate and no data is shared. www.facebook.com/privacy/policy/

6. International transfers

Some of our providers (Google, Apple, Stripe, RevenueCat, Meta) may process data outside your country of residence. Where this happens, such transfers rely on applicable legal mechanisms, such as the European Commission Standard Contractual Clauses.

7. Data retention

We keep your account data while your account remains active. The push notification token is kept while the app is installed and notifications are authorized; it is removed when you log out, uninstall the app, or disable notifications. After your account is deleted, we erase or anonymize your data, except what we must keep to comply with legal or tax obligations.

8. Your rights

You can exercise the following rights over your personal data:

• Access, rectification and erasure.
• Restriction of and objection to processing.
• Data portability.
• Withdraw your consent at any time.
• To exercise any of these rights, or to request deletion of your account and data, email us at privacy@bitcox.co. We will handle your request within the timeframes set by applicable law.

9. California residents (CCPA/CPRA)

If you reside in California, you have the right to know what personal data we collect, to request its deletion or correction, and to non-discrimination for exercising your rights. We do not sell your personal data. With your explicit consent, we use the Meta (Facebook/Instagram) pixel to measure the performance of our advertising campaigns; this may share browser identifiers and website events (for example, a visit or a registration) with Meta. If you do not consent, the pixel does not activate and no data is shared with Meta. To exercise these rights, contact us at privacy@bitcox.co.

10. Security

We encrypt communications in transit (HTTPS/TLS) and apply reasonable technical and organizational measures to protect your data. No system is completely infallible, but we work to maintain an appropriate level of protection.

11. Cookies

We use strictly necessary cookies and local storage for login and your preferences (language and theme). See the details in our Cookie Policy.

12. Minors

The service is not directed to people under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us to delete it.

13. Important notice: not financial advice

Bitcox provides informational and educational analysis about financial options. The content does not constitute financial or investment advice or a personalized recommendation. Investment decisions and their risks are solely yours; always verify data and prices in your own broker before trading.

14. Changes to this policy

We may update this policy from time to time. We will publish the current version with its last-updated date on this page.